When you run:
puppet cert list --all
-from the master
Do you see the certificate for the agent machine listed?
Is the master defined correctly in your
Are you running Puppet Open Source or Puppet Enterprise?
Depending on the answer to that your directory locations will be different:
Once you get to the puppet directory where your manifests and modules directories are go into the
You should see several directories:
Look in the
certs directory. If you server is named
server1 you should have a
server1.dnsname.com.pem certificate file.
Look at it via
It should match the certificate in the same location on the agent (match mean be identical).
Also, on the master you should have the same cert located in the
If any of them are off or if you want to re-authorize an agents certificates from the master run a
puppet cert clean server1.dnsname.com and it will revoke and remove all instances of the agents certificate from the master and you can re-request and re-sign a new one from the agent. Additionally, I would run a search after the clean to make sure that it got them all and delete any stragglers.
Let me know if any of this helps or simply cause you more frustration.
Before you run any command like:
puppet cert clean etc... you can get more information with the options by adding
--help as in -
puppet cert --help